DevSecOps Engineer - GCP
Core
Securing Google Cloud Platform (GCP) infrastructure, governance, and AI workloads through audit, policy enforcement, and risk remediation.
Role type
Mid-level DevSecOps Engineer (GCP)
Builds
Secure GCP environments, CI/CD pipelines, and AI infrastructure for mobile app publishing.
Domain
Cloud Security / GCP / Mobile App Publishing
Deliverable
production ML models | infrastructure
Required skills
GCP IAM, Organization Policies, Cloud Billing, Cloud Logging, Cloud Monitoring, API key management, Service Account security, Python scripting, Cloud Run, Cloud Functions, BigQuery, Cloud Storage, Pub/Sub, Vertex AI, CI/CD security
Preferred skills
Terraform, Security Command Center, VPC Service Controls, Cloud KMS, Secret Manager, Workload Identity Federation, automated billing controls, vulnerability management
Technologies
GCP, Python, Bash, GitHub Actions, Docker, Vertex AI
Responsibilities
Audit and strengthen security across GCP projects, folders, and IAM roles; maintain centralized inventory of deployed services; implement Organization Policies to control risky configurations; reduce long-lived service account keys using Secret Manager or Workload Identity; enable budget kill switches and monitoring alerts; coordinate remediation of unused or misconfigured services; secure CI/CD pipelines and AI infrastructure; document security controls and access exceptions.
Seniority
Mid-level, hands-on IC
